Software engineer · systems, infrastructure, security · San Jose, CA BS Computer Science, University of San Francisco, May 2027 · Available June 2027
I build software that has to be correct: filesystem tools, developer tooling, backend services for sensitive data, and local AI infrastructure, mostly in Rust. Most of my public work is upstream, in tools other people depend on.
30+ merged PRs to uutils/coreutils · fixes for 2 CVEs shipping in Ubuntu 26.04 · simgit-cli on crates.io
| Project | What it is | Highlights |
|---|---|---|
| uutils/coreutils | Rust rewrite of GNU coreutils, shipped in Ubuntu |  Official fix for CVE-2026-35356, cited fix for CVE-2026-35362 |
| QuackXide | Team project, in progress: a database for protected data where plaintext exists only inside attested enclaves | Attestation verification for Confidential Space on Intel TDX |
| simgit | Copy-on-write Git worktrees for running many agents on one repo |  10 MiB per extra worktree vs 567 MiB for git worktree on microsoft/vscode |
| zed | Code editor | Fixed Git staging corruption from ambiguous diff-hunk placement |
Also: LAO, a DAG workflow engine with runtime-loaded C-ABI plugins · pig, a capability-aware gateway for local llama.cpp and MLX workers
uutils/coreutils
- Closed TOCTOU symlink races in
install,ln, andtacwith fd-anchored traversal primitives inuucore. - Hardened recursive
cp,chmod, andchownagainst symlinked targets and directories swapped mid-walk. - Brought the safe traversal layer to macOS, FreeBSD, AIX, and GNU Hurd; fixed SELinux
-Zcontext lookup for relative paths. - Rewrote
expr's recursive-descent parser iteratively to remove stack overflows on deeply nested input.
QuackXide (in progress)
- Verify Confidential Space attestation tokens on Intel TDX, with bounded token age and fuzzed claim decoding.
- Wrote the design record for key custody and attested key release.
- Removed fail-open configuration defaults from the query engine.
- Locked down outbound connectors: HTTPS only, no redirects, capped response bodies.
Finishing QuackXide this semester. Looking for software engineering roles starting June 2027: systems, backend, infrastructure, developer tools, or security. Bay Area or remote.